Serge E. Hallyn
1f29fae297
file capabilities: add no_file_caps switch (v4) ...
Add a no_file_caps boot option when file capabilities are
compiled into the kernel (CONFIG_SECURITY_FILE_CAPABILITIES=y).
This allows distributions to ship a kernel with file capabilities
compiled in, without forcing users to use (and understand and
trust) them.
When no_file_caps is specified at boot, then when a process executes
a file, any file capabilities stored with that file will not be
used in the calculation of the process' new capability sets.
This means that booting with the no_file_caps boot option will
not be the same as booting a kernel with file capabilities
compiled out - in particular a task with CAP_SETPCAP will not
have any chance of passing capabilities to another task (which
isn't "really" possible anyway, and which may soon by killed
altogether by David Howells in any case), and it will instead
be able to put new capabilities in its pI. However since fI
will always be empty and pI is masked with fI, it gains the
task nothing.
We also support the extra prctl options, setting securebits and
dropping capabilities from the per-process bounding set.
The other remaining difference is that killpriv, task_setscheduler,
setioprio, and setnice will continue to be hooked. That will
be noticable in the case where a root task changed its uid
while keeping some caps, and another task owned by the new uid
tries to change settings for the more privileged task.
Changelog:
Nov 05 2008: (v4) trivial port on top of always-start-\
with-clear-caps patch
Sep 23 2008: nixed file_caps_enabled when file caps are
not compiled in as it isn't used.
Document no_file_caps in kernel-parameters.txt.
Signed-off-by: Serge Hallyn <serue@us.ibm.com>
Acked-by: Andrew G. Morgan <morgan@kernel.org>
Signed-off-by: James Morris <jmorris@namei.org>
2008-11-06 07:14:51 +08:00
irq: make variable static
2008-10-22 07:37:17 +02:00
PM_TEST_SUSPEND should depend on RTC_CLASS, not RTC_LIB
2008-11-01 12:40:38 -07:00
Merge branch 'timers/range-hrtimers' into v28-range-hrtimers-for-linus-v2
2008-10-22 09:48:06 +02:00
tracing, ring-buffer: add paranoid checks for loops
2008-11-03 11:10:04 +01:00
tty: Fix abusers of current->sighand->tty
2008-10-13 09:51:42 -07:00
[PATCH] Fix the bug of using AUDIT_STATUS_RATE_LIMIT when set fail, no error output.
2008-08-01 12:15:16 -04:00
[PATCH] get rid of nameidata in audit_tree
2008-10-23 05:12:53 -04:00
Re: [PATCH] the loginuid field should be output in all AUDIT_CONFIG_CHANGE audit messages
2008-08-01 12:15:03 -04:00
tty: Fix abusers of current->sighand->tty
2008-10-13 09:51:42 -07:00
file capabilities: add no_file_caps switch (v4)
2008-11-06 07:14:51 +08:00
cgroup: remove unused variable
2008-10-26 09:38:17 -07:00
cgroups: fix probable race with put_css_set[_taskexit] and find_css_set
2008-10-20 08:52:38 -07:00
freezer_cg: simplify freezer_change_state()
2008-10-30 11:38:45 -07:00
Merge branches 'timers/clocksource', 'timers/hrtimers', 'timers/nohz', 'timers/ntp', 'timers/posixtimers' and 'timers/debug' into v28-timers-for-linus
2008-10-20 13:14:06 +02:00
kernel/configs.c: remove useless comments
2008-10-20 08:52:34 -07:00
Merge branches 'sched/devel', 'sched/cpu-hotplug', 'sched/cpusets' and 'sched/urgent' into sched/core
2008-10-08 11:31:02 +02:00
cpuset: use seq_*mask_* to print masks
2008-10-20 08:52:39 -07:00
per-task-delay-accounting: update taskstats for memory reclaim delay
2008-07-25 10:53:47 -07:00
dma-coherent: export dma_[alloc|release]_from_coherent methods
2008-08-22 08:34:53 +02:00
kernel/dma.c: remove a CVS keyword
2008-10-16 11:21:30 -07:00
proc: move /proc/execdomains to kernel/exec_domain.c
2008-10-23 14:30:41 +04:00
Merge branch 'tracing-v28-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-10-20 13:35:07 -07:00
Merge branch 'timers/range-hrtimers' into v28-range-hrtimers-for-linus-v2
2008-10-22 09:48:06 +02:00
freezer_cg: use thaw_process() in unfreeze_cgroup()
2008-10-30 11:38:45 -07:00
hrtimer: make the futex() system call use the per process slack value
2008-09-11 07:17:00 -07:00
Merge branch 'timers/range-hrtimers' into v28-range-hrtimers-for-linus-v2
2008-10-22 09:48:06 +02:00
timers: fix itimer/many thread hang
2008-09-14 16:25:35 +02:00
kernel/kallsyms.c: fix double return
2008-10-16 11:21:32 -07:00
container freezer: implement freezer cgroup subsystem
2008-10-20 08:52:34 -07:00
sched: fix SCHED_HRTICK dependency
2008-07-28 14:37:38 +02:00
kexec: fix crash_save_vmcoreinfo_init build problem
2008-10-20 15:28:50 -07:00
kgdb: call touch_softlockup_watchdog on resume
2008-10-06 13:50:59 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux-2.6-for-linus
2008-10-16 12:38:34 -07:00
make kprobes.c:kretprobe_table_lock() static
2008-10-16 11:21:52 -07:00
profiling: dynamically enable readprofile at runtime
2008-10-16 11:21:31 -07:00
Merge branch 'tracing-v28-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-10-20 13:35:07 -07:00
lockdep: fix irqs on/off ip tracing
2008-10-28 11:19:07 +01:00
lockdep: build fix
2008-08-13 12:55:10 +02:00
lockstat: fix numerical output rounding error
2008-08-26 10:37:46 +02:00
Merge branch 'tracing/ftrace' into tracing/urgent
2008-10-22 09:08:14 +02:00
markers: bit-field is not thread-safe nor smp-safe
2008-10-14 10:38:45 +02:00
Merge branch 'proc' of git://git.kernel.org/pub/scm/linux/kernel/git/adobriyan/proc
2008-10-23 12:04:37 -07:00
locking: fix mutex @key parameter kernel-doc notation
2008-07-28 18:12:36 +02:00
ftrace: ignore functions that cannot be kprobe-ed
2008-10-14 10:34:22 +02:00
cgroup_clone: use pid of newly created task for new cgroup
2008-07-25 10:53:37 -07:00
removed unused #include <linux/version.h>'s
2008-08-23 12:14:12 -07:00
Make panic= and panic_on_oops into core_params
2008-10-22 10:00:25 +11:00
Fix compile warning in kernel/params.c
2008-10-23 12:09:00 -07:00
pidns: remove now unused find_pid function.
2008-07-25 10:53:45 -07:00
pid_ns: (BUG 11391) change ->child_reaper when init->group_leader exits
2008-09-02 19:21:38 -07:00
pm_qos_requirement might sleep
2008-09-02 19:21:40 -07:00
timers: fix itimer/many thread hang, v2
2008-09-23 13:38:44 +02:00
Merge branch 'timers/range-hrtimers' into v28-range-hrtimers-for-linus-v2
2008-10-22 09:48:06 +02:00
printk: remove unused code from kernel/printk.c
2008-10-23 21:54:29 +02:00
kernel/profile: fix profile_init() section mismatch
2008-10-30 11:38:46 -07:00
make ptrace_untrace() static
2008-10-20 08:52:39 -07:00
rcu: RCU-based detection of stalled CPUs for Classic RCU, fix
2008-10-03 10:41:00 +02:00
rcupdate: fix bug of rcu_barrier*()
2008-10-21 15:59:53 +02:00
byteorder: remove direct includes of linux/byteorder/swab[b].h
2008-10-20 08:52:40 -07:00
rcu: trace fix possible mem-leak
2008-08-15 17:54:40 +02:00
byteorder: remove direct includes of linux/byteorder/swab[b].h
2008-10-20 12:51:53 -07:00
relay: fix "full buffer with exactly full last subbuffer" accounting problem
2008-08-05 14:33:46 -07:00
cgroup files: convert res_counter_write() to be a cgroups write_string() handler
2008-07-25 10:53:36 -07:00
reserve_region_with_split: Fix GFP_KERNEL usage under spinlock
2008-11-01 09:53:58 -07:00
sysdev: Pass the attribute to the low level sysdev show/store function
2008-07-21 21:55:02 -07:00
hrtimer: convert kernel/* to the new hrtimer apis
2008-09-05 21:35:13 -07:00
sched: virtual time buddy preemption
2008-10-24 12:51:03 +02:00
sched_clock: prevent scd->clock from moving backwards
2008-10-10 11:17:04 +02:00
sched: change sched_debug's mode to 0444
2008-10-30 11:37:57 +01:00
sched: virtual time buddy preemption
2008-10-24 12:51:03 +02:00
sched: disable the hrtick for now
2008-10-20 14:27:43 +02:00
sched: add CONFIG_SMP consistency
2008-10-22 10:01:52 +02:00
Merge commit 'v2.6.28-rc1' into sched/urgent
2008-10-24 12:48:46 +02:00
Merge branch 'proc' of git://git.kernel.org/pub/scm/linux/kernel/git/adobriyan/proc
2008-10-23 12:04:37 -07:00
semaphore: __down_common: use signal_pending_state()
2008-08-05 14:33:47 -07:00
'kill sig -1' must only apply to caller's namespace
2008-10-30 11:38:46 -07:00
smp: have smp_call_function_single() detect invalid CPUs
2008-08-25 17:45:48 -07:00
Merge branches 'timers/clocksource', 'timers/hrtimers', 'timers/nohz', 'timers/ntp', 'timers/posixtimers' and 'timers/debug' into v28-timers-for-linus
2008-10-20 13:14:06 +02:00
Make the taint flags reliable
2008-10-16 11:21:31 -07:00
lockdep: spin_lock_nest_lock(), checkpatch fixes
2008-08-13 13:56:51 +02:00
Revert "Call init_workqueues before pre smp initcalls."
2008-10-25 19:53:38 -07:00
Merge branch 'timers/range-hrtimers' into v28-range-hrtimers-for-linus-v2
2008-10-22 09:48:06 +02:00
Configure out AIO support
2008-10-16 11:21:51 -07:00
Merge commit 'v2.6.28-rc2' into tracing/urgent
2008-10-27 10:50:54 +01:00
sysctl: check for bogus modes
2008-07-25 10:53:45 -07:00
taskstats: remove initialization of static per-cpu variable
2008-07-25 10:53:47 -07:00
select: add a timespec_add_safe() function
2008-09-05 21:34:57 -07:00
Merge branches 'timers/clocksource', 'timers/hrtimers', 'timers/nohz', 'timers/ntp', 'timers/posixtimers' and 'timers/debug' into v28-timers-for-linus
2008-10-20 13:14:06 +02:00
tracepoint: check if the probe has been registered
2008-10-27 16:45:46 +01:00
task IO accounting: move all IO statistics in struct task_io_accounting
2008-07-27 16:12:28 -07:00
sched: rt-bandwidth for user grouping interface
2008-08-19 13:10:09 +02:00
removed unused #include <linux/version.h>'s
2008-08-23 12:14:12 -07:00
removed unused #include <linux/version.h>'s
2008-08-23 12:14:12 -07:00
sysctl: simplify ->strategy
2008-10-16 11:21:47 -07:00
wait: kill is_sync_wait()
2008-10-16 11:21:31 -07:00
workqueue: introduce create_rt_workqueue
2008-10-22 10:00:25 +11:00
1f29fae297